Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
File:                     F92cI69p7Czbb-K5k260lM_RYh8.mft (raw, json)
Hash identifier:          gXQrNzsPnFUg4coW6f/WzcIyJNrqeRxoReZbi4q63fs=
Subject key identifier:   FB:31:48:CC:A3:1D:8A:45:78:15:5A:00:FE:60:EC:19:97:F3:47:2B
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Certificate issuer:       /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial:       01962F06F62301016CD0FE53B45DF50A42E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: F92cI69p7Czbb-K5k260lM_RYh8.crl (hash: P9RJovNzYayLSu+1uXToVb2Q6QztukCHXuPL5qVru20=)
                          2: Kj5ZZT_QMGV8ggXHA75R7vnwc-Y.roa (hash: p+eVg1Sb75Egr4y3obi4lrz5P3sy7D8NwnWNwRsHb70=)
                          3: NIDKHm7_cZUNMihpKQDzfd-ZjRA.roa (hash: kaf5wyEDhcWh11clAHcF36F7W+dfPnAjUXKofTGxPck=)
                          4: PGLRT7UqxBVt5ZGCBsJhv8rP6qQ.roa (hash: RTH/rFrhQw74U5knflYk2x+P7ymGF/LwjJP/pIPOpvM=)
                          5: amXihoIti_1rSNyGXmBzzCK307E.roa (hash: nLmxvSWML2dah+dCWe4SPAyANy3yKBIMLrJwHa4DIEM=)
                          6: cmnKESnx3pYzc_9zB3Nnd1QMDJ8.roa (hash: yO89D9gVpePds41T+w6tzQYVY3S3xzIRop0YPL+B3+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f6:23:01:01:6c:d0:fe:53:b4:5d:f5:0a:42:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=fb3148cca31d8a4578155a00fe60ec1997f3472b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2a:a6:e0:f1:8a:71:46:1f:ae:dd:1f:db:14:
                    f5:8f:b0:01:22:1d:91:00:ec:a8:46:81:53:32:4f:
                    33:e7:46:60:e1:1a:7e:8b:b8:07:04:b4:1c:5d:48:
                    49:58:0d:db:b3:8f:18:29:b2:af:c3:ca:5f:79:33:
                    f4:ba:80:b0:60:13:5b:4f:b5:a2:46:57:ef:96:da:
                    84:68:3d:68:ca:3b:e2:f1:7c:d9:14:53:c1:d6:46:
                    0b:a6:f0:76:88:cb:fc:4c:e8:f7:5e:ec:6e:e1:95:
                    18:1a:01:d8:7f:02:c2:81:47:28:6d:0a:26:ca:f7:
                    fa:ae:f9:1c:08:59:0c:57:41:65:e1:c9:23:8e:53:
                    93:b5:ee:8f:14:29:4d:73:ed:2e:37:50:3e:11:0e:
                    a0:a1:93:33:77:43:12:81:13:c5:8b:91:2c:90:75:
                    38:48:de:63:3e:b5:0b:0e:36:2e:83:b2:cf:6e:81:
                    08:11:9b:db:26:d9:49:95:7a:09:18:ad:74:f1:9a:
                    7e:33:e7:ce:c3:46:f9:1e:48:51:3f:2a:91:f6:3c:
                    00:31:d9:66:5d:3e:ab:4e:36:2b:65:6b:2c:c4:85:
                    ff:b9:ba:da:91:14:5e:8e:ba:f1:41:b8:af:fa:f3:
                    0c:1f:0b:da:94:e0:58:94:d2:ce:02:f1:b0:39:31:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:31:48:CC:A3:1D:8A:45:78:15:5A:00:FE:60:EC:19:97:F3:47:2B
            X509v3 Authority Key Identifier:
                keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c6:5f:78:cf:54:05:09:47:65:fa:1d:3c:b1:9e:35:91:2c:
         2b:1a:dd:fb:36:f3:c2:a4:c1:88:21:e4:e0:f8:8c:a8:5f:e3:
         32:76:8f:0a:f3:f9:ba:6e:87:6e:81:44:dd:ec:59:39:c2:4a:
         69:7c:d3:ff:3d:2f:6f:6f:0a:06:a5:6c:18:e2:ad:b3:d1:80:
         b4:00:a1:f9:dc:dd:1b:0c:4b:46:74:31:19:b4:43:cd:35:b6:
         65:60:14:eb:58:82:d7:be:0f:a5:4d:b0:d2:ef:03:9b:45:87:
         ff:38:f6:f1:db:cd:f6:16:d5:25:98:1b:94:24:c7:bf:8b:7e:
         5f:50:8b:db:5c:4b:d8:02:25:10:c0:24:d3:13:f0:61:52:21:
         32:0f:87:f2:e7:1a:a8:c2:5b:1c:17:eb:fa:37:b8:7f:8f:75:
         e0:27:4c:93:78:74:49:ba:9b:39:c9:db:11:04:1a:75:f9:75:
         76:d3:c8:61:75:5c:b6:17:ca:bf:7e:98:0e:99:7d:36:c8:cc:
         4a:79:42:e1:a8:dd:46:14:38:09:3e:7e:28:c3:d4:0e:87:03:
         c9:11:f5:58:ca:2e:f0:34:11:b8:50:ea:e3:a8:2e:d1:ed:a5:
         8e:e9:4d:66:70:81:86:7b:76:39:ff:87:cd:59:ba:16:ed:f9:
         6f:84:e5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net